Threats tagged 'bit-tomcat-2025-55668'

A session fixation vulnerability exists in Apache Tomcat via the rewrite valve. This affects Apache Tomcat versions from 11.0.0 through 11.0.7, 10.1.0 through 10.1.41, and 9.0.0 through 9.0.105, with older end-of-life versions potentially also affected. The issue allows an attacker to fixate a session identifier, potentially leading to unauthorized session access. Fixed versions are 11.0.8, 10.1.42, and 9.0.106.